CSRF, changed the way userform is used